Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/22731A70633911F19BE8A0AE9047A888.roa
File:                     22731A70633911F19BE8A0AE9047A888.roa (raw, json)
Hash identifier:          UmmcPemPU0tWJbfY6lMqE7ZovWJWSvFntveKjR8TB4k=
Subject key identifier:   E2:90:64:7E:66:40:ED:4E:BF:9E:A7:4B:9D:09:D3:70:F1:10:EA:48
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       0668
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/22731A70633911F19BE8A0AE9047A888.roa
Signing time:             Mon 08 Jun 2026 12:54:07 +0000
ROA not before:           Mon 08 Jun 2026 12:54:07 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     135247
IP address blocks:        193.149.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1640 (0x668)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Jun  8 12:54:07 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a26bb6f-d41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:9d:19:1f:43:41:64:88:73:7b:8d:9b:ff:
                    04:71:32:42:3a:2d:cf:5a:4a:b8:31:86:ee:bb:5c:
                    c0:25:14:e5:f0:63:e1:7b:19:ed:a6:fd:3d:0a:bc:
                    2a:c1:23:30:a5:2f:55:d9:dd:0b:e7:8c:8b:0b:2c:
                    a4:73:c7:07:bc:8b:be:56:ee:17:f7:bf:dd:95:19:
                    29:dd:6c:73:bd:62:39:65:92:8b:8c:96:d3:00:28:
                    04:12:df:eb:a4:60:a2:28:ba:58:d2:ae:03:7e:a4:
                    17:5c:0c:ee:a5:54:74:fb:f1:d2:83:22:7b:27:45:
                    a3:de:8d:f8:4d:f5:a4:87:e9:a8:03:f6:9b:79:ce:
                    73:fc:af:d4:24:18:bf:d6:74:83:22:7c:40:10:16:
                    75:1e:bf:53:ff:7a:d4:0e:a5:3e:9a:17:9d:47:f6:
                    91:21:f8:05:84:6e:b2:76:4c:14:b1:b6:a5:a8:c5:
                    57:f5:d3:6a:99:b3:a6:cc:38:ca:2a:0d:72:4b:f1:
                    f1:ba:22:55:22:25:c1:ee:9f:bd:9c:18:e1:aa:00:
                    bc:ba:f0:2a:c5:bf:0f:f7:ff:bb:c0:74:89:7c:d3:
                    19:5e:c9:5f:ee:80:67:5c:16:4b:dd:45:b4:ef:97:
                    80:28:ca:06:6c:8a:6e:56:cb:b3:c4:8b:73:20:38:
                    44:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:90:64:7E:66:40:ED:4E:BF:9E:A7:4B:9D:09:D3:70:F1:10:EA:48
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/22731A70633911F19BE8A0AE9047A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:52:a8:e1:3f:58:aa:e6:e0:32:58:7d:f8:02:b2:c3:83:47:
         43:f9:32:9c:e7:4d:9a:1a:58:72:15:66:32:2e:8f:b9:46:56:
         5b:fa:01:b0:1d:c0:55:db:37:45:1c:18:d0:ed:6d:cb:ce:4d:
         8f:7d:09:21:a9:bd:0b:e5:52:fe:07:53:71:c7:ad:b6:32:33:
         bc:83:f4:a3:21:63:7b:a9:b5:c3:fc:f4:4b:15:9b:20:e4:aa:
         ca:4c:c2:50:91:96:21:52:0d:fc:94:a0:33:ef:c9:e2:9b:15:
         6a:e9:57:0b:ef:04:10:19:f3:89:bc:19:9c:db:b0:ce:a1:ec:
         25:19:76:89:fa:1e:9a:cb:10:3a:37:ac:d4:3a:81:d6:33:6a:
         c0:c8:0e:d5:16:11:0b:9d:14:e0:99:d4:63:db:e8:da:12:7e:
         d3:1d:b6:b5:ec:03:7f:86:c1:d7:d3:02:e2:18:ea:df:3f:b1:
         28:b2:91:b4:19:79:31:47:32:eb:51:9a:b2:be:52:26:9d:6a:
         0e:99:e3:db:22:0f:3c:ce:64:6b:2e:51:97:c7:b3:a2:58:3f:
         d3:4a:13:66:98:7f:6b:00:b5:6d:2a:dd:27:ba:bc:d9:8a:67:
         26:58:57:3c:f6:72:88:bb:7d:3f:62:d0:ac:5e:48:3c:e5:cb:
         f3:0a:e4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:04:30 2026 by rpki-client